---
typeId: req
recordId: benac-desc-002
fields:
  title: Descriptor config validation
  statement: Descriptor configuration shall be validated against the package descriptor
    config schema before trust, invocation, storage use, compute use, or execution.
    Descriptor config validation shall use the declared package schema ruleset or
    another explicitly declared and supported schema ruleset. A Host Implementation
    shall not substitute implementation-specific schema behavior without recording the
    schema ruleset used and passing conformance vectors for that ruleset.
  rationale: Invalid configuration should fail loudly before effects occur, and
    independent implementations must validate descriptor configuration the same way.
  verification: Invalid descriptor config is rejected. Descriptor config validation
    fixtures produce equivalent valid/invalid decisions and diagnostic records containing
    stable diagnostic classification codes, required context bindings, and raw or
    origin-specific evidence references where practical and safe across conforming
    implementations.
  testable: true
  status: draft
  area: BENAC-DESC
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.7 Package model, descriptors, and package claims
  order: 84
---
